revite
revite copied to clipboard
issue: dependabot security updates not compatible with yarn v3
trafficstars
PRs created by Dependabot use the original yarn.lock format so they will just break the project.
Remote issue:
- [ ] https://github.com/dependabot/dependabot-core/issues/1297
Some solutions brought up in the issue:
- Run
yarn upon a cronjob and create PRs through that, though this could potentially introduce API breaking changes - Use the existing Dependabot PRs and make them work
- Alternative solution by styled-icons team
Possible alternative: investigate switching to Renovate - it includes Yarn 3, can bundle updates and more
Now supports yarn v3